$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QpjTStSq5NVW6OthB78XFePslwM.roa File: QpjTStSq5NVW6OthB78XFePslwM.roa (raw, json) Hash identifier: Ly3BssYlg9JsLmTKkgPpgciImrP+LoWm10YYt5r0szw= Subject key identifier: 42:98:D3:4A:D4:AA:E4:D5:56:E8:EB:61:07:BF:17:15:E3:EC:97:03 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0199 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QpjTStSq5NVW6OthB78XFePslwM.roa Signing time: Tue 31 Mar 2026 07:53:44 +0000 ROA not before: Tue 31 Mar 2026 07:53:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.189.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:53:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4298D34AD4AAE4D556E8EB6107BF1715E3EC9703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:ac:05:ff:1a:76:c4:72:9c:15:59:58:55: 2b:1b:2a:2d:de:07:d3:9e:4e:d5:e7:1a:5f:01:97: 13:b8:7a:3b:1b:df:18:2e:85:3c:55:ab:33:c4:17: a0:67:1e:e7:b3:82:fd:73:d2:9e:d7:31:38:c7:62: a0:9c:b4:67:8f:a5:0f:ca:6b:6d:f1:d2:ce:00:7c: c4:41:dc:94:80:39:19:58:fa:80:0e:b2:4e:6e:2b: b6:f1:aa:db:27:c1:e1:ee:a5:77:49:17:ce:b8:4a: 4b:d8:bc:5b:12:eb:3f:54:b3:21:93:c6:c7:1f:3b: 0f:cf:17:29:8d:b4:8e:c3:3d:0f:b1:8d:ee:7f:b7: 9d:64:c1:ed:81:fb:47:6b:46:47:f7:00:da:cb:05: 27:7d:a9:5c:41:90:13:56:e6:90:3e:96:91:23:1c: 51:18:c0:d6:a5:7b:cc:eb:9f:a6:9e:ed:df:37:94: b4:53:82:02:fb:50:60:d3:dc:15:b8:cb:df:7c:98: 2c:b3:59:2c:ef:c5:6a:b2:8d:23:5f:2b:fa:1d:0e: c8:54:9d:76:60:e9:24:9a:4a:21:ef:aa:ad:28:16: 5a:68:4a:8c:2e:db:05:44:e5:d0:94:18:ec:21:48: fe:16:3b:b8:f3:bd:b9:99:d7:7a:0d:1c:8e:2a:67: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:D3:4A:D4:AA:E4:D5:56:E8:EB:61:07:BF:17:15:E3:EC:97:03 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QpjTStSq5NVW6OthB78XFePslwM.roa sbgp-ipAddrBlock: critical IPv4: 210.189.248.0/24 Signature Algorithm: sha256WithRSAEncryption b0:1f:2d:78:48:6a:ed:af:09:17:89:63:c9:72:2e:ff:d4:e3: 0f:18:f3:59:1a:29:5e:3f:5b:76:77:d5:2e:f5:70:d7:52:73: 60:c6:fc:2b:84:fc:b2:74:d8:22:5a:44:94:ea:c8:c8:d2:3e: cc:fb:48:ef:b1:de:b0:18:52:e3:f1:5c:04:97:f4:76:00:87: c6:7c:30:fd:0d:30:dd:a4:65:ee:58:1e:a5:15:e8:5e:95:d4: b7:e6:8c:80:c0:5c:70:32:6b:03:13:40:42:64:d8:50:f9:32: cd:9b:34:fa:1a:18:c1:86:a2:17:8d:71:86:c5:1a:d8:08:99: 58:d7:6a:4b:c2:32:7d:de:d7:c3:f7:a3:6c:52:89:c9:f0:b7: cf:d9:08:05:8d:b7:9c:93:bd:25:fb:77:dc:6f:dd:40:37:15: 55:dc:61:16:15:c8:55:2b:02:4b:99:69:ad:82:2b:d9:eb:1e: 66:cb:0b:d7:8e:e0:a0:4a:38:ab:1b:21:e9:f6:68:d2:fd:5d: 21:5f:de:a9:97:82:74:a9:ad:f3:50:7d:06:fe:d5:a0:8f:25: c6:37:5b:ee:f1:c2:1f:8c:60:cf:a5:ea:9c:e2:0e:c0:0a:25: 5e:41:ef:4f:da:8b:f0:f9:75:6d:64:f3:d0:dd:f7:f4:ce:70: 14:0f:27:0c -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUzNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQyOThEMzRBRDRBQUU0 RDU1NkU4RUI2MTA3QkYxNzE1RTNFQzk3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrDqwF/xp2xHKcFVlYVSsbKi3eB9OeTtXnGl8BlxO4ejsb3xgu hTxVqzPEF6BnHuezgv1z0p7XMTjHYqCctGePpQ/Ka23x0s4AfMRB3JSAORlY+oAO sk5uK7bxqtsnweHupXdJF864SkvYvFsS6z9UsyGTxscfOw/PFymNtI7DPQ+xje5/ t51kwe2B+0drRkf3ANrLBSd9qVxBkBNW5pA+lpEjHFEYwNale8zrn6ae7d83lLRT ggL7UGDT3BW4y998mCyzWSzvxWqyjSNfK/odDshUnXZg6SSaSiHvqq0oFlpoSowu 2wVE5dCUGOwhSP4WO7jzvbmZ13oNHI4qZ5P9AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUQpjTStSq5NVW6OthB78XFePslwMwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9RcGpUU3RTcTVOVlc2T3RoQjc4WEZlUHNsd00ucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0r34MA0GCSqGSIb3DQEBCwUA A4IBAQCwHy14SGrtrwkXiWPJci7/1OMPGPNZGileP1t2d9Uu9XDXUnNgxvwrhPyy dNgiWkSU6sjI0j7M+0jvsd6wGFLj8VwEl/R2AIfGfDD9DTDdpGXuWB6lFeheldS3 5oyAwFxwMmsDE0BCZNhQ+TLNmzT6GhjBhqIXjXGGxRrYCJlY12pLwjJ93tfD96Ns UonJ8LfP2QgFjbeck70l+3fcb91ANxVV3GEWFchVKwJLmWmtgivZ6x5mywvXjuCg SjirGyHp9mjS/V0hX96pl4J0qa3zUH0G/tWgjyXGN1vu8cIfjGDPpeqc4g7ACiVe Qe9P2ovw+XVtZPPQ3ff0znAUDycM -----END CERTIFICATE-----Generated at Wed Apr 1 15:57:44 2026 by rpki-client